efriese

We just started using Asana a couple of months ago, but we're not seeing the performance issues some other folks are mentioning. I just hit Asana full refresh and it took 2-3 seconds to render all of the components in My Tasks. It seems pretty snappy in my opinion. Asana with a few Zaps has been great. Because I know they're watching...could you guys add a calendar view to the iOS app? =)

I own a coffee shop in addition to my tech work. Most people know having runway is important to any startup. If he had to declare bankruptcy 6 months after opening he wasn't set up for success.

If you make good coffee, choose the right location, and do a decent job of marketing you can get cash flow positive with time. Acquiring customers can be slow, but once they taste good coffee they will come back.

Much of the other comments here are true, you don't open a coffeeshop to get rich. The only way you can make good money is to scale into multiple locations.

This decision is getting a lot of hate here in Alabama and I'm surprised to see some support here. The knee jerk reaction is to think this a separation issue, but its really not. States can delegate authority for law enforcement to anyone they choose.

With that being said, its still a dumb idea. Our government is wasting time debating this issue when there are so many topics that are real issues. This church could hire full time security people or outsource to a security company. My alma mater had a university police force, but decided to contract the local police instead because it was more cost efficient.

And Christ never said life was going to be safe. He actually said the opposite.

Livelihood encompasses more than just financial. If it were just money most people could get by. The stress on a person and their family while job hunting, especially at the CTO level, can be pretty huge. I would much rather have some runway to find the gig I want rather worry about my reputation.

If you really need the unemployment I would blow the whistle. Your livelihood is always more valuable than a reputation. I doubt your reputation will take a huge hit for reporting what sounds like a dishonest company.

I don't want to get into a my framework is better than your framework fight, but I disagree with people who say flask can only be used for simple applications. Just because it's a micro framework doesn't mean it's only for micro apps. The trade off on framework size is how much functionality you want out of the box. If you want a bunch of features and are okay with doing it the Django way, Django is great. If you want more flexibility, smaller frameworks like Flask or Pyramid work fine.

If the developer writes code that handles credit card information, absolutely. Most organizations utilize third parties to handle credit card info so they don't have to be PCI compliant. Even then, it helps to know something about PCI because the developer may be storing more information than needed.

In general I think every developer should receive secure coding training. Most developers don't...

"We have people in the back room creating new profiles as we speak."

This is an amazing story. Reminds me of my mother. I need to call her...

There are also salts/hashes in many of these configs...not such a great place to store those =)

Not necessarily. If you do a test with good SQL and a second test with SQL Injection and compare the responses that can show SQL Injection exists without having to change the database. This won't work for all SQL injection tests, but I would rather take this approach first.

Yeah, I would make the SQL injection and command injections test a little less kinetic =). Using a simple SELECT test, like SELECT @@VERSION, would be a little safer... Edit: Forget to say thanks! This is a pretty cool list.

+1 for Python. You're probably aware of a company called Sonatype that does something like this during the dev process. Their business is growing fast. As far as I know nobody is doing this in production. I think you've found a nice niche that has a lot of potential. Good luck.

Oh yeah I know, I think there's value in what you're trying to do. I would pay 9/m if it also covered application dependencies. I was just curious how it works. What's the time between CVE release and getting a notification from your service?

So you're cataloging the software installed and then monitoring for CVEs?

No, I'm fluffy.

Awesome idea. I hope you guys get to production. It would be a fun challenge with my son to see what we can make each month.

You have to embrace the suck. I felt the same way for a long time, but as long as you are learning on every project you'll get better. I used to be very self-conscious about my code...I guess I still am a little. I stopped trying to do more projects and focused on one or two. Keep doing revisions until it starts to look good and you feel good about it.

A few years out of college, I was working at a startup building UAVs. It was pretty awesome. We had to move for me to take this job and my wife switched schools for the move. After 2 years she wasn't happy and wanted to move back to her original school to finish her degree. In order to make the move happen I had to take a programming job that was horrible. I was doing .NET web sites and babysitting a SharePoint server. Horrible, but I did it for my wife. I thought I would have to explain the blip on the radar in the future. While I was at this job, I met a guy who was a consultant for a silicon valley startup. He talked me into joining their company. That was 7 years ago. By taking the crap job, I found a dream job.

Just code, learn, and keep your eyes open.

I've worked for a major static analysis product company for 7 years and I can tell you from experience customizing rules is not a popular feature. People like the idea of writing custom rules, but the vast majority don't. You guys may make a market out of this and prove me wrong wrong, I just wanted to provide some feedback based on my experience in this industry.

It depends on what you want. Are you looking for experience? To pick a winning horse? The important part of any job decision is to decide on what you want. This sounds basic, but for every job decision I've ever made I started with a statement of what I want and then did a pro/con list. I assigned a value to each item and derived a score. It's really easy to get caught up in trying to make the "right choice". I don't regret any of my job decisions, so it's worked for me. Might work for you too.

You don't have to have a job, you have to earn money. Those are two different things. Begging is a form of income. I think your view of "luxury" is somewhat different than most people. Most people in poverty live in cities with high cost of living. Relying on them to make the most of that money by moving out of cities isn't likely to happen. They could already do that today and don't.

No I get that, but are you really advocating giving everyone the amount that the lowest tier get today? It's like $35k per year total.

No, we wouldn't, because we don't do that. Yes we do. What do you consider EIC to be?

Basic income avoids this utterly. Not quite. If you give it to everyone the individual amount will be lower. $1k a month won't even make a dent. It would need to be closer to $3k a month to get close to the combined benefits people can get. That's around $900B a year.

This assumes that giving everyone a basic income is a life preserver. If giving people in poverty money was the fix, we would be done. People have to want to get out of poverty. Really want it. The system right now incentivizes people to stay in poverty. The "cliff effect", where government benefits decrease faster than gains in earnings, keeps many people from getting out. Trying to address that problem first would be better than just giving everyone money.

As a heavy user of SalesForce, I will say I like the simplicity. On that same note, there are many features missing that make your CRM unusable for me. My sales process is much more complicated, so I would need more functionality in defining the sales process and being able to sort/report on that system. If I were a user of your system, my next feature list would be:

1. Definable sales process. I.E, Step 1 Quality. 2 Understand the Problem. 3. Develop the Solution etc. 2. Configurable fields for deals - At least add a Notes box. In the absence of configurable fields I could at least put data in the notes field. 3. Activity Tracking - Besides tracking a contact or a deal, it's important to also know what activities have occurred to turn a lead into a deal, close a deal, etc.

I would also spend some time over at http://owasp.org learning about security. You have some pretty obvious security vulnerabilities. Many people put security off until they "have time" but I would seriously at least try to focus on implementing SSL and removing at least cross site scripting and SQL Injection.

I hope this is helpful. Keep hacking.

I don't know that I would compensate more for that achievement, but it would certainly stand out in an interview. The fact you gained that badge tells me you not only have the knowledge, but you also enjoy helping other people learn. That skill is much more valuable to me as an employer. A person like that can elevate a whole team.

Yeah, that's what I do. I just use a separate virtual desktop for each project I'm working on. I've thought about writing scripts to pull everything up, but I've never taken the time.

Yeah, I would contact both. Netflix may not even call the police if the damage is "minimal" in their terms. Getting the police involved forces the issue with Netflix. I'm not sure how effective it will be, but it doesn't hurt. Or you could mess with his/her head. Hire some guys to follow him around for a few days and make it very obvious. Man, I can think of so many possibilities...

I like it. Here are a few thoughts: 1. I agree about the price point. If it were $5 I might be a buyer. I know it's insignificant, but it adds up when you have a team of people. 2. I would run this entire site on SSL. There's some good stuff to sniff here. 3. I don't like having to type in the name of a project and clicking the + to get to the form. I would rather just click + and get the form. Didn't seem intuitive to me. 4. When leaving comments on a feature, it was duplicating the comment. My username was there and then the same comment with blank user data. 5. On the "dashboard" or whatever you want to call it, tickets that I have assigned to myself for today aren't showing up. I have to go to the planner. 6. I clicked "Board" and then all of the links died. Refresh got me to the board. 7. When I move things in the Planner, they don't seem to take effect. I can't seem to get a ticket into Today.

Overall, I like what you've done here. I like being able to segment by customer and the board. Simple interface that is good once you learn the workflow.

So what is this? I love the idea of contributing to something like this, but they don't make the process clear. Is this a job? Can I work part time on specific tasks? There are people willing to leave the private sector to do this work, but that's not always an option. They need to find a way to leverage people's spare cycles. They also don't mention anything about security. The skill gap in security is MUCH larger than development. They are missing an opportunity there...